Skip to content
This repository was archived by the owner on Apr 22, 2025. It is now read-only.

Commit 6dc1d38

Browse files
bestbeforetodaybestbeforetoday
authored
Update dependencies (#160)
Also suppress false positive vulnerability detections. Signed-off-by: Mark S. Lewis <[email protected]>
1 parent 53857d0 commit 6dc1d38

File tree

2 files changed

+62
-18
lines changed

2 files changed

+62
-18
lines changed

‎dependency-suppressions.xml‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,4 +27,25 @@
2727
<packageUrl regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl>
2828
<vulnerabilityName>CVE-2022-1471</vulnerabilityName>
2929
</suppress>
30+
<suppress>
31+
<notes><![CDATA[
32+
Vulnerability in C++ gRPC implementation
33+
]]></notes>
34+
<packageUrl regex="true">^pkg:maven/io\.opentelemetry\.instrumentation/opentelemetry\-grpc\-1\.6@.*$</packageUrl>
35+
<cve>CVE-2023-33953</cve>
36+
</suppress>
37+
<suppress>
38+
<notes><![CDATA[
39+
Vulnerability in C++ gRPC implementation
40+
]]></notes>
41+
<packageUrl regex="true">^pkg:maven/io\.opentelemetry\.instrumentation/opentelemetry\-grpc\-1\.6@.*$</packageUrl>
42+
<cve>CVE-2023-32732</cve>
43+
</suppress>
44+
<suppress>
45+
<notes><![CDATA[
46+
Vulnerability in CouchDB itself, not cloudant client API
47+
]]></notes>
48+
<packageUrl regex="true">^pkg:maven/com\.ibm\.cloud/cloudant(-common)?@.*$</packageUrl>
49+
<cve>CVE-2023-26268</cve>
50+
</suppress>
3051
</suppressions>

‎pom.xml‎

Lines changed: 41 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -38,22 +38,22 @@
3838
<properties>
3939
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
4040
<javaVersion>8</javaVersion>
41-
<javadoc.version>3.4.1</javadoc.version>
41+
<javadoc.version>3.5.0</javadoc.version>
4242
</properties>
4343

4444
<dependencyManagement>
4545
<dependencies>
4646
<dependency>
4747
<groupId>io.cucumber</groupId>
4848
<artifactId>cucumber-bom</artifactId>
49-
<version>7.11.2</version>
49+
<version>7.13.0</version>
5050
<type>pom</type>
5151
<scope>import</scope>
5252
</dependency>
5353
<dependency>
5454
<groupId>org.junit</groupId>
5555
<artifactId>junit-bom</artifactId>
56-
<version>5.9.2</version>
56+
<version>5.10.0</version>
5757
<type>pom</type>
5858
<scope>import</scope>
5959
</dependency>
@@ -111,12 +111,12 @@
111111
<dependency><!-- override the version under cloudant-client -->
112112
<groupId>commons-codec</groupId>
113113
<artifactId>commons-codec</artifactId>
114-
<version>1.15</version>
114+
<version>1.16.0</version>
115115
</dependency>
116116
<dependency>
117117
<groupId>com.ibm.cloud</groupId>
118118
<artifactId>cloudant</artifactId>
119-
<version>0.5.0</version>
119+
<version>0.5.4</version>
120120
</dependency>
121121
</dependencies>
122122

@@ -126,24 +126,24 @@
126126
<plugins>
127127
<plugin>
128128
<artifactId>maven-clean-plugin</artifactId>
129-
<version>3.2.0</version>
129+
<version>3.3.1</version>
130130
</plugin>
131131
<plugin>
132132
<artifactId>maven-site-plugin</artifactId>
133133
<version>3.12.1</version>
134134
</plugin>
135135
<plugin>
136136
<artifactId>maven-project-info-reports-plugin</artifactId>
137-
<version>3.4.1</version>
137+
<version>3.4.5</version>
138138
</plugin>
139139
<!-- see http://maven.apache.org/ref/current/maven-core/default-bindings.html#Plugin_bindings_for_jar_packaging -->
140140
<plugin>
141141
<artifactId>maven-resources-plugin</artifactId>
142-
<version>3.3.0</version>
142+
<version>3.3.1</version>
143143
</plugin>
144144
<plugin>
145145
<artifactId>maven-compiler-plugin</artifactId>
146-
<version>3.10.1</version>
146+
<version>3.11.0</version>
147147
<configuration>
148148
<source>${javaVersion}</source>
149149
<target>${javaVersion}</target>
@@ -160,7 +160,7 @@
160160
</plugin>
161161
<plugin>
162162
<artifactId>maven-surefire-plugin</artifactId>
163-
<version>3.0.0-M7</version>
163+
<version>3.1.2</version>
164164
<configuration>
165165
<excludes>
166166
<exclude>**/scenario/**</exclude>
@@ -224,11 +224,34 @@
224224
</plugin>
225225
<plugin>
226226
<artifactId>maven-install-plugin</artifactId>
227-
<version>3.0.1</version>
227+
<version>3.1.1</version>
228228
</plugin>
229229
<plugin>
230230
<artifactId>maven-deploy-plugin</artifactId>
231-
<version>3.0.0</version>
231+
<version>3.1.1</version>
232+
</plugin>
233+
<plugin>
234+
<groupId>org.apache.maven.plugins</groupId>
235+
<artifactId>maven-enforcer-plugin</artifactId>
236+
<version>3.3.0</version>
237+
<executions>
238+
<execution>
239+
<id>enforce-version</id>
240+
<goals>
241+
<goal>enforce</goal>
242+
</goals>
243+
<configuration>
244+
<rules>
245+
<requireJavaVersion>
246+
<version>${javaVersion}</version>
247+
</requireJavaVersion>
248+
<requireMavenVersion>
249+
<version>3.2.5</version>
250+
</requireMavenVersion>
251+
</rules>
252+
</configuration>
253+
</execution>
254+
</executions>
232255
</plugin>
233256
</plugins>
234257
</pluginManagement>
@@ -265,7 +288,7 @@
265288
<plugin>
266289
<groupId>org.apache.maven.plugins</groupId>
267290
<artifactId>maven-source-plugin</artifactId>
268-
<version>3.2.1</version>
291+
<version>3.3.0</version>
269292
<executions>
270293
<execution>
271294
<id>attach-sources</id>
@@ -306,7 +329,7 @@
306329
<plugin>
307330
<groupId>org.apache.maven.plugins</groupId>
308331
<artifactId>maven-checkstyle-plugin</artifactId>
309-
<version>3.2.0</version>
332+
<version>3.3.0</version>
310333
<configuration>
311334
<configLocation>checkstyle.xml</configLocation>
312335
<consoleOutput>true</consoleOutput>
@@ -318,7 +341,7 @@
318341
<dependency>
319342
<groupId>com.puppycrawl.tools</groupId>
320343
<artifactId>checkstyle</artifactId>
321-
<version>10.9.3</version>
344+
<version>10.12.2</version>
322345
</dependency>
323346
</dependencies>
324347
<executions>
@@ -341,7 +364,7 @@
341364
<plugin>
342365
<groupId>org.owasp</groupId>
343366
<artifactId>dependency-check-maven</artifactId>
344-
<version>8.2.1</version>
367+
<version>8.3.1</version>
345368
<configuration>
346369
<skipProvidedScope>true</skipProvidedScope>
347370
<skipTestScope>true</skipTestScope>
@@ -377,7 +400,7 @@
377400
<plugins>
378401
<plugin>
379402
<artifactId>maven-assembly-plugin</artifactId>
380-
<version>3.5.0</version>
403+
<version>3.6.0</version>
381404
<configuration>
382405
<descriptorRefs>
383406
<descriptorRef>jar-with-dependencies</descriptorRef>
@@ -395,7 +418,7 @@
395418
<plugin>
396419
<groupId>org.apache.maven.plugins</groupId>
397420
<artifactId>maven-gpg-plugin</artifactId>
398-
<version>3.0.1</version>
421+
<version>3.1.0</version>
399422
<executions>
400423
<execution>
401424
<id>sign-artifacts</id>

0 commit comments

Comments
 (0)